
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
subway-assets
Advanced tools
通过单独的repo存储一些不随着直通车业务变更的静态资源类库。提高缓存命中率以及业务上的打包速度。
npm run babel-polyfill //打包babel-polyfill
npm run components // 打包Brix Components
npm run gallery // 打包Magix3 Components
npm run mevent // 打包mini-event
npm run vd // 打包virtual-dom
npm run html2hscript // 打包html2hyperscript
npm run etpl // 打包etpl
npm run mock // 打包mock
npm run moment // 打包moment
npm run clipboard // 打包clipboard
npm run magix // 打包magix
npm run daily // 发布daily
npm run publish // 以semver模式进行发布
1、magix@3.8.10增加locationChange
触发是stateKeys
参数的传递
npm run test
1、同步scrollpannel组件的订正
1、更新Brix Components Region 区域名称 赣南 -> 赣西南
1、迁移直通车Brix Components类库
1、增加类库magix。最新兼容层版本3.8.10。
2、修正mountVframe
复用vframe
对象后,需要及时销毁新增的vframe.view
属性。
3、修正使用Bable Es6 Class 进行继承的类时,包装的render
方法和renderShort
依然是父类的方法bug。
4、修正使用Babel Es6 Class 进行继承ES5的类时,events
的事件没有被正确继承造成的问题,3.7.0版本正确,3.8.10改错了。
5、修正updater
当更新数据时,组件没有变化也会触发刷新的问题。
6、兼容老事件处理时,event process 与 stopPropagation冲突,后置event process的处理。
1、增加类库magix。包含兼容层代码。
1、使用更加完善的命令打包各个类库
2、增加类库mini-event
3、增加类库virtual-dom
4、增加类库html2hyperscript
5、增加类库etpl
6、增加类库Mock@0.1.11
7、增加类库moment@2.13.0
8、增加类库clipboard@1.7.1
1、增加babel-polyfill.min.js 6.26.0版本
FAQs
We found that subway-assets demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.